Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64tM1G2ivLUWvt6hEAwFQbNTZ4VhTFca1Hjm8kGwtyic/1/323830343a323732343a3a2f33322d3438203d3e20323633383739.roa
File:                     323830343a323732343a3a2f33322d3438203d3e20323633383739.roa (raw, json)
Hash identifier:          uiZZO7ajGsR/tkMVi9oEt6+kClBXd9qYHZzmmWn7DL8=
Subject key identifier:   99:3F:C8:FD:D6:E4:B6:0E:F3:8E:5E:63:BB:21:E9:2E:84:18:17:D2
Certificate issuer:       /CN=74C039C7C150330C336CF168CC6D88F65E572B86
Certificate serial:       5BFD4C7F359B102413D03D25DC20FE59056548EF
Authority key identifier: 74:C0:39:C7:C1:50:33:0C:33:6C:F1:68:CC:6D:88:F6:5E:57:2B:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74C039C7C150330C336CF168CC6D88F65E572B86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64tM1G2ivLUWvt6hEAwFQbNTZ4VhTFca1Hjm8kGwtyic/1/323830343a323732343a3a2f33322d3438203d3e20323633383739.roa
Signing time:             Thu 06 Mar 2025 00:51:43 +0000
ROA not before:           Thu 06 Mar 2025 00:46:43 +0000
ROA not after:            Thu 05 Mar 2026 00:51:43 +0000
asID:                     263879
IP address blocks:        2804:2724::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/64tM1G2ivLUWvt6hEAwFQbNTZ4VhTFca1Hjm8kGwtyic/1/74C039C7C150330C336CF168CC6D88F65E572B86.crl
                          rsync://rpki-repo.registro.br/repo/64tM1G2ivLUWvt6hEAwFQbNTZ4VhTFca1Hjm8kGwtyic/1/74C039C7C150330C336CF168CC6D88F65E572B86.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74C039C7C150330C336CF168CC6D88F65E572B86.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:51:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:fd:4c:7f:35:9b:10:24:13:d0:3d:25:dc:20:fe:59:05:65:48:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74C039C7C150330C336CF168CC6D88F65E572B86
        Validity
            Not Before: Mar  6 00:46:43 2025 GMT
            Not After : Mar  5 00:51:43 2026 GMT
        Subject: CN=993FC8FDD6E4B60EF38E5E63BB21E92E841817D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a3:43:3b:ef:21:fb:c0:42:47:05:c0:c1:43:
                    18:70:e8:14:53:f0:ba:50:8a:a1:b0:51:a9:dd:c8:
                    1d:e7:5a:b0:23:7a:2e:9c:39:95:96:55:2a:79:70:
                    50:b2:08:d5:8c:19:c3:c7:b5:26:49:97:4d:48:b7:
                    50:f7:58:08:fc:8b:3e:e5:54:d3:82:09:f3:9a:a6:
                    57:e8:1d:fd:b5:19:da:d2:3c:fd:83:18:a3:87:77:
                    a1:90:c2:b8:bc:e1:98:e8:cc:64:c0:c4:96:50:18:
                    b7:e5:d8:01:d9:72:e5:fd:98:4d:72:33:a1:2a:d5:
                    5a:84:7e:8b:95:d4:c7:23:a8:70:08:4d:cc:a9:88:
                    e0:d5:ab:b4:5a:0c:2d:56:93:9f:6d:30:1c:f4:20:
                    37:44:23:02:0a:b2:79:14:ca:67:7c:02:ae:42:af:
                    02:47:96:c7:8f:75:ba:c5:e3:a0:60:6d:3b:6b:71:
                    90:ad:6d:be:f6:fb:d0:79:69:82:92:74:e3:eb:4c:
                    7d:4e:1b:d7:88:fc:bc:d3:79:0d:71:40:b1:fb:5e:
                    0a:08:7b:16:01:73:a8:c7:97:15:00:49:5f:1d:d9:
                    5a:a5:fa:39:3e:79:44:4b:61:c6:f0:45:70:4e:d5:
                    4a:6d:b6:4c:cc:f8:db:d6:96:d4:8e:ba:41:15:15:
                    78:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:3F:C8:FD:D6:E4:B6:0E:F3:8E:5E:63:BB:21:E9:2E:84:18:17:D2
            X509v3 Authority Key Identifier:
                keyid:74:C0:39:C7:C1:50:33:0C:33:6C:F1:68:CC:6D:88:F6:5E:57:2B:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64tM1G2ivLUWvt6hEAwFQbNTZ4VhTFca1Hjm8kGwtyic/1/74C039C7C150330C336CF168CC6D88F65E572B86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74C039C7C150330C336CF168CC6D88F65E572B86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64tM1G2ivLUWvt6hEAwFQbNTZ4VhTFca1Hjm8kGwtyic/1/323830343a323732343a3a2f33322d3438203d3e20323633383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2724::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:d7:2a:bc:61:0a:56:c8:53:f0:97:5f:e4:31:0f:53:bd:f0:
         43:78:cb:ec:c0:f6:aa:34:1b:b5:bf:24:92:af:f1:46:09:56:
         7d:2b:b9:47:c9:b2:0c:85:fa:41:cd:87:2f:6f:51:64:d6:a2:
         9e:0d:29:4e:70:3a:fd:d2:9d:5e:56:a7:55:0a:b9:37:98:32:
         0e:c0:5c:53:65:4f:cc:f3:2f:3c:30:9e:42:50:c9:23:0c:0c:
         ec:6a:cd:b9:b1:55:17:e0:91:bc:e6:3d:f6:6f:c0:d4:ba:99:
         e2:93:9c:a8:e4:ee:ee:c2:cd:03:01:bc:b9:72:74:30:05:22:
         76:fa:64:fe:52:65:7f:b0:cc:58:6b:c0:f1:79:c9:ee:2f:53:
         76:d8:85:76:a9:ab:c0:71:f0:ee:fa:d1:9d:4a:e9:58:45:b9:
         f3:23:62:ba:b1:83:2a:bf:7e:2e:d3:93:ed:a7:16:46:04:45:
         47:cb:1e:1d:dd:ed:67:af:04:d3:2a:16:97:fe:4b:02:e5:54:
         35:37:5c:10:13:1d:78:e7:20:a5:db:ef:9d:e3:3f:38:b1:98:
         0f:17:ac:bf:19:4a:1d:26:c9:cd:da:6a:dc:1e:57:cb:4f:82:
         cd:38:7e:1d:ed:85:6d:e7:ee:37:50:93:1a:74:76:3b:9e:c6:
         d3:16:a5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:33:33 2025 by rpki-client